296 matches found
aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0, <=2.8) +1420 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.5.6.sec03)
org.springframework:spring-beans MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0, =1.0, =0.0.1,...
br.com.tecsinapse:glimpse-server (>=1.1.1, <=1.1.2), com.alexkasko.springjdbc.typedqueries:typed-queries-codegen (>=1.0, <=1.4.4) +91 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.0.2.release)
org.springframework:spring-beans MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.tecsinapse:glimpse-server =1.1.1, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0.0, =6.0.2,...
ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.amazonaws:elasticache-java-cluster-client (1.0.61.0) +257 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.0.3.release)
org.springframework:spring-beans MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =4.0.0, =22.0.2-beta, =1.1.0-rc2, =3.0.9, =3.0.9,...
at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2), ca.grimoire.spring:spring-request-aware (1.0) +248 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.0.4.release)
org.springframework:spring-beans MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-1, =1.0.2, =1.1.1, =1.0.3, =1.0.1, =1.0-beta-1,...
be.eliwan:ew-profiling-api (>=1.0, <=1.4), be.eliwan:ew-profiling-core (>=1.0, <=1.4) +1321 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.0.5.release)
org.springframework:spring-beans MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - be.eliwan:ew-profiling-api =1.0, =1.0, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2, =1.2, =1.0.0...
com.elibom:jogger (>=0.2.0, <=0.2.1), com.github.qiujiayu:autoload-cache (>=1.3, <=2.8) +137 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.2.10.release)
org.springframework:spring-beans MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.elibom:jogger =0.2.0, =1.3, =1.0.0.release, =1.0.0.release, =1.0.2, =1.0.2, =1.0.2...
ch.ralscha:extdirectspring (1.7.3), cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1) +1952 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (4.3.12.release)
org.springframework:spring-beans MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.ralscha:extdirectspring 1.7.3 - cn.afterturn:easypoi-spring-boot-starter =0.1, =1.2...
ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +255 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.2.2.release)
org.springframework:spring-beans MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.0, =1.6.0, =2.100.0, =2.0.2, =2.0.2, =2.0.2,...
africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +15170 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (>=5.3.0, <=5.3.17)
org.springframework:spring-beans MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2022-22965 Source advisory: GHSA-36P3-WJMG-H94X...
at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +339 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (4.0.3.release)
org.springframework:spring-beans MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release -...
com.github.inspektr:inspektr-support-spring (1.0.0.ga), com.googlecode.ehcache-spring-annotations:ehcache-spring-annotations (>=0.0.2, <=1.1.0-rc1) +61 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (3.0.1.release)
org.springframework:spring-beans MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...
be.objectify:deadbolt-java-gs_2.11 (2.6.0), be.objectify:deadbolt-java-gs_2.12 (2.6.0) +1668 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (4.3.9.release)
org.springframework:spring-beans MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - be.objectify:deadbolt-java-gs2.11 2.6.0 - be.objectify:deadbolt-java-gs2.12 2.6.0 -...
org.springframework:spring-aop (2.0-m1), org.springframework:spring-context (2.0-m1) +12 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.0-m1)
org.springframework:spring-beans MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-context 2.0-m1 -...
net.sourceforge.jsf-comp:acegi-jsf (1.1.3), org.acegisecurity:acegi-security (>=1.0.5, <=1.0.7) +35 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (1.2.9)
org.springframework:spring-beans MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - net.sourceforge.jsf-comp:acegi-jsf 1.1.3 - org.acegisecurity:acegi-security =1.0.5, =1.0.5,...
au.com.mountain-pass:hyperstate-cert (>=1, <=10), au.com.mountain-pass:hyperstate-client (>=1, <=10) +1182 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (4.3.2.release)
org.springframework:spring-beans MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - au.com.mountain-pass:hyperstate-cert =1, =1, =1, =1, =1, =1, =0.1, =1.0.0-rc, =0.0.26,...
br.com.neppo.jlibs:jira-client (1.0), cn.chenzw.swagger:swagger-ext-all (1.0.1) +491 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (4.3.24.release)
org.springframework:spring-beans MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.neppo.jlibs:jira-client 1.0 - cn.chenzw.swagger:swagger-ext-all 1.0.1 -...
com.discursive.dao.generic:generic-dao (>=2.0, <=2.1), com.google.inject.extensions:guice-spring (2.0) +205 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.0.6)
org.springframework:spring-beans MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.discursive.dao.generic:generic-dao =2.0, =1.0, =0.9, =0.7.2, =0.0.1, =1.0.0, =1.1.2,...
com.browseengine.bobo:bobo-browse (>=3.2.0, <=4.0.2), com.browseengine.bobo:bobo-solr (3.2.0) +431 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.5.5)
org.springframework:spring-beans MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.browseengine.bobo:bobo-browse =3.2.0, =0.2.0, =0.0.2, =0.1.9, =0.1.3, =0.6.0, =0.7.8, =0.6....
Remote Code Execution (RCE)
spring-beans is vulnerable to remote code execution. Using Spring Parameter Binding with non-basic parameter types, such as POJOs, allows an unauthenticated attacker to execute arbitrary code on the target system by writing or uploading arbitrary files e.g .jsp files to a location that can be...
